This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/muJold8C5TUMixIVaL6rH1BS38A.roa File: muJold8C5TUMixIVaL6rH1BS38A.roa (raw, json) Hash identifier: FbxuoRz2634QOjJkP7NzNJtkodYJ1wTVSJlQ4uQWs58= Subject key identifier: 9A:E2:68:95:DF:02:E5:35:0C:8B:12:15:68:BE:AB:1F:50:52:DF:C0 Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2 Certificate serial: 019B76EB812572D1E314B0A220B2CDEF8AEC Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/muJold8C5TUMixIVaL6rH1BS38A.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200548 IP address blocks: 45.87.188.0/22 maxlen: 22 45.87.189.0/24 maxlen: 24 45.87.190.0/24 maxlen: 24 45.87.191.0/24 maxlen: 24 91.230.22.0/24 maxlen: 24 130.0.92.0/22 maxlen: 22 185.159.120.0/22 maxlen: 24 185.159.122.0/24 maxlen: 24 185.159.123.0/24 maxlen: 24 185.174.72.0/22 maxlen: 24 185.189.220.0/22 maxlen: 22 185.189.220.0/24 maxlen: 24 185.189.221.0/24 maxlen: 24 185.189.222.0/24 maxlen: 24 185.189.223.0/24 maxlen: 24 192.76.138.0/24 maxlen: 24 2a0b:f880::/29 maxlen: 29 2a0b:f880::/32 maxlen: 32 2a0b:fb00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:81:25:72:d1:e3:14:b0:a2:20:b2:cd:ef:8a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2 Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ae26895df02e5350c8b121568beab1f5052dfc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:08:6e:03:70:27:5b:18:05:93:c7:48:93: 4d:39:85:16:8e:4e:7a:fc:45:32:0e:8f:7d:82:aa: 89:aa:53:28:58:ad:32:ff:f4:3d:53:ce:b9:fb:e2: 8c:70:5a:e5:89:a9:df:f9:67:65:0b:66:4d:38:0d: 31:96:05:03:97:73:dc:8e:c8:b3:d6:56:36:97:3e: e8:9d:3e:45:db:5f:eb:0c:ab:b7:49:ae:5d:f9:5e: 59:5f:ce:dd:8a:4d:e9:b9:c3:4f:57:13:fc:59:2b: c0:a6:79:83:4b:66:fe:fe:fe:28:74:c3:f7:ad:10: 98:5c:8b:31:3a:e6:b4:b0:1e:47:49:82:f3:55:cd: a6:11:9b:a6:ac:e7:01:04:be:de:71:28:5e:fd:b6: 20:53:78:96:0a:b6:ca:b8:3d:98:47:28:49:d0:6d: cb:c7:04:58:25:5f:66:57:61:98:e3:38:15:ac:24: a2:47:95:7e:95:b3:18:63:34:05:cf:06:78:2b:cf: f4:84:12:10:6a:4f:59:45:73:26:fb:79:ab:49:7e: d3:bb:da:21:81:66:29:7c:7b:d5:73:4e:bb:de:62: a6:a0:85:c3:16:a4:50:db:1b:a9:41:a9:c2:1f:a2: ae:20:24:d0:5e:1b:6d:b7:27:e7:cb:da:f5:94:f3: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E2:68:95:DF:02:E5:35:0C:8B:12:15:68:BE:AB:1F:50:52:DF:C0 X509v3 Authority Key Identifier: keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/muJold8C5TUMixIVaL6rH1BS38A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.188.0/22 91.230.22.0/24 130.0.92.0/22 185.159.120.0/22 185.174.72.0/22 185.189.220.0/22 192.76.138.0/24 IPv6: 2a0b:f880::/29 2a0b:fb00::/29 Signature Algorithm: sha256WithRSAEncryption 41:3d:b9:59:92:ec:23:be:2b:e6:b8:d1:aa:e3:a1:00:96:ca: 64:34:aa:d8:a2:3f:0b:eb:18:d6:85:a4:b3:2b:33:5a:8b:49: a2:3e:2c:ad:45:a9:dd:3e:58:b5:01:67:64:b6:12:09:bd:5d: fd:9d:52:ed:3f:fc:0e:19:37:4f:b4:41:95:8d:bc:ec:bf:9a: d1:19:78:a4:b7:85:a0:23:c4:db:c6:93:50:95:62:c1:90:90: eb:40:ae:74:2e:64:3a:7c:60:83:ce:14:79:c4:9a:50:66:d4: a9:78:b7:04:67:48:88:da:91:8d:6b:d8:3b:a1:8d:80:a8:c3: 23:f1:3d:14:3b:85:bb:20:70:79:da:cf:49:05:7f:22:69:51: 12:c2:a3:b1:83:5b:05:21:b7:3a:81:83:84:6b:bd:5a:04:12: 17:6d:cf:b9:fe:fb:ae:e3:ea:74:76:9f:86:2e:c5:31:8b:99: fd:87:24:84:95:07:ef:05:40:0f:c3:41:a2:d4:f8:7d:66:3f: 02:a2:a2:eb:87:18:41:21:69:14:d2:88:69:4b:50:5b:7a:1e: fb:1f:5c:31:d9:e4:07:a5:9c:8f:04:a8:cc:8e:74:56:bf:ef: 5d:9d:c3:8c:84:44:c3:a3:a8:e9:42:37:8e:75:18:62:66:5d: 4a:3b:33:b3 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt264ElctHjFLCiILLN74rsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj MzkzYjIwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWUyNjg5NWRmMDJlNTM1MGM4YjEyMTU2OGJlYWIxZjUwNTJkZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDwIbgNwJ1sYBZPHSJNNOYUWjk56 /EUyDo99gqqJqlMoWK0y//Q9U865++KMcFrlianf+WdlC2ZNOA0xlgUDl3Pcjsiz 1lY2lz7onT5F21/rDKu3Sa5d+V5ZX87dik3pucNPVxP8WSvApnmDS2b+/v4odMP3 rRCYXIsxOua0sB5HSYLzVc2mEZumrOcBBL7ecShe/bYgU3iWCrbKuD2YRyhJ0G3L xwRYJV9mV2GY4zgVrCSiR5V+lbMYYzQFzwZ4K8/0hBIQak9ZRXMm+3mrSX7Tu9oh gWYpfHvVc0673mKmoIXDFqRQ2xupQanCH6KuICTQXhtttyfny9r1lPN/iwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFJriaJXfAuU1DIsSFWi+qx9QUt/AMB8GA1UdIwQY MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt MWFkNjFlZGUwYTRhLzEvbXVKb2xkOEM1VFVNaXhJVmFMNnJIMUJTMzhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQCLVe8AwQA W+YWAwQCggBcAwQCuZ94AwQCua5IAwQCub3cAwQAwEyKMBQEAgACMA4DBQMqC/iA AwUDKgv7ADANBgkqhkiG9w0BAQsFAAOCAQEAQT25WZLsI74r5rjRquOhAJbKZDSq 2KI/C+sY1oWksyszWotJoj4srUWp3T5YtQFnZLYSCb1d/Z1S7T/8Dhk3T7RBlY28 7L+a0Rl4pLeFoCPE28aTUJViwZCQ60CudC5kOnxgg84UecSaUGbUqXi3BGdIiNqR jWvYO6GNgKjDI/E9FDuFuyBwedrPSQV/ImlREsKjsYNbBSG3OoGDhGu9WgQSF23P uf77ruPqdHafhi7FMYuZ/YckhJUH7wVAD8NBotT4fWY/AqKi64cYQSFpFNKIaUtQ W3oe+x9cMdnkB6WcjwSozI50Vr/vXZ3DjIREw6Oo6UI3jnUYYmZdSjszsw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:35 2026 by rpki-client